Improve security

Signed-off-by: Bensuperpc <bensuperpc@gmail.com>
This commit is contained in:
Bensuperpc 2024-05-12 11:11:53 +02:00
parent 33b68a1811
commit 340c1a1438
No known key found for this signature in database
GPG Key ID: 15D0B1525584D383
4 changed files with 27 additions and 17 deletions

View File

@ -13,7 +13,7 @@
DOCKER := docker
PROFILES := caddy wordpress adminer uptime-kuma qbittorrent gitea jellyfin watchtower backup syncthing openssh
PROFILES := caddy wordpress gitea adminer uptime-kuma qbittorrent jellyfin watchtower backup syncthing openssh
PROFILE_CMD := $(addprefix --profile ,$(PROFILES))
COMPOSE_FILES := $(shell find docker-compose*.yml | sed -e 's/^/--file /')

View File

@ -8,8 +8,8 @@
}
}
import bensuperpc.org/Caddyfile
import bensuperpc.com/Caddyfile
import bensuperpc.net/Caddyfile
import bensuperpc.ovh/Caddyfile
import bensuperpc.fr/Caddyfile
import bensuperpc.org/*
import bensuperpc.com/*
import bensuperpc.net/*
import bensuperpc.ovh/*
import bensuperpc.fr/*

View File

@ -5,3 +5,15 @@ bensuperpc.net {
www.bensuperpc.net {
redir https://www.bensuperpc.org{uri} permanent
}
git.bensuperpc.net {
redir https://git.bensuperpc.org{uri} permanent
}
jellyfin.bensuperpc.net {
redir https://jellyfin.bensuperpc.org{uri} permanent
}
uptimekuma.bensuperpc.net {
redir https://uptimekuma.bensuperpc.org{uri} permanent
}

View File

@ -20,19 +20,17 @@ services:
- infra-network
env_file:
- env/caddy.env
cap_add:
- NET_ADMIN
security_opt:
- no-new-privileges:true
# cap_drop:
# - ALL
# cap_add:
cap_drop:
- ALL
cap_add:
# - CHOWN
# - FOWNER
# - DAC_OVERRIDE
# - SETGID
# - SETUID
# - NET_BIND_SERVICE
- NET_BIND_SERVICE
healthcheck:
test: pidof caddy || exit 1
interval: 120s